Neu im Forum:
Workshop am 06.11.: TYPO3 v14 Integration und Deployment mit GitHub Actions

Neu im Forum:
Workshop am 06.11.: TYPO3 v14 Integration und Deployment mit GitHub Actions
GitHub ActionsとAWSでM5StickS3のファームウェアを遠隔更新する
GhostAction added deceptive automation files to 772 public GitHub projects.
GitGuardian says 26 credentials were stolen from 13 projects.
By Oct.
5, only 124 pr…
https://en.hacks.gr/i-kampania-ghostaction-eklepse-26-stoicheia-prosvasis-apo-13-erga-sto-github/
GhostAction targets 772 GitHub repos, steals SSH, cloud & API credentials via fake Actions workflows. #SupplyChain #GitHubActions #GhostAction #CI/CD #DevSecOps #SecurityNews https://thedailytechfeed.com/ghostaction-supply-chain-campaign-steals-ci-cd-secrets-via-malicious-github-actions/
GITHUB_TOKEN no dispara workflows: 11 releases, 0 corridas
¿Por qué GITHUB_TOKEN no dispara workflows? 11 releases en verde, 0 publicaciones y 4 arreglos para encadenar corridas sin caer en bucles infinitos
#githubactions #github_token #cicd #workflows
CVE-2022-25860 - simple-git
The simple-git library used in several projects could let an attacker run their own code on your system. This risk has been fixed in newer releases, and the updates…
Too many irrelevant or confusing CVEs? Use stackflag.com
DevOps & Security Engineer - Entertainment — truelogic
Colombia
https://hiring.lat/job/devops-security-engineer-entertainment-truelogic/311644
DevOps & Security Engineer - Entertainment — truelogic
Panama
https://hiring.lat/job/devops-security-engineer-entertainment-truelogic/311645
Going deeper on my multi-stage pipeline (Pegasus Galaxy), because the interesting part is what I got wrong.
Promotion rebuilds artifacts from the tag instead of packaging once. It works, but a rebuild can drift. Not true promotion yet.
#CICD #GitHubActions
Caída de GitHub Actions: deploys frenados y plan B
¿Jobs en queued sin error? Mirá cómo detectar una caída de GitHub Actions y armar un plan B para deployar un hotfix sin depender solo de GitHub
#githubactions #cicd #selfhostedrunners #deploy #incidentes
Codefresh is reportedly down for some users at the moment. Are you one of them? #AdaptiveDown #GithubDown #GithubActions
https://statusisdown.com/service/codefresh/
Adaptive Web Services is reportedly down for some users at the moment. Are you one of them? #AdaptiveDown #GithubDown #GithubActions https://statusisdown.com/service/adaptive_web_services/
One line in setup-java caches your Maven, Gradle, or sbt deps in GitHub Actions. No more downloading all artifacts on every CI run. Still fully reproducible. #GitHubActions #Java #CI
The model only writes the hypothesis (sleep before assert, shared dict, real hostname). The threshold already decided.
Full build + PR flow 👇
https://devtocash.com/blog/2026-10-05-flaky-test-quarantine-agent-junit-history-flake-rate-ci
Deploying a Ghost theme from GitHub Actions, behind Cloudflare Access
Push a version tag and your Ghost theme is built, gscan-checked, uploaded and activated. Here is the workflow, the deploy script, and how to make it pass a Cloudflare Access service token.
複数行のコマンドをGithub Actionsで使う
Never let it delete a cache. A miss costs minutes; deleting the one a nightly job needs costs a 03:00 outage.
Full build 👇
https://devtocash.com/blog/2026-10-04-github-actions-cost-agent-wasted-runner-minutes-cache-misses-superseded-runs
#GitHubActions #FinOps #DevOps
Small CI improvements create compound gains. Faster builds, clearer failures, and automated checks give developers more time to solve real problems. #GitHubActions #CICD #DevOps
What 'secrets: inherit' actually hands over
It forwards every secret the caller can see, not a chosen subset.
#GH200 #GitHubActions #CICD #DevOps
Full GH-200 explanation, free: https://navyduck.com/github/gh-200/q049-reusable-workflow-secrets-inherit
Pipeline CI/CD seguro: commit a producción sin sustos
Como armar un pipeline CI/CD seguro con GitHub Actions, Docker y OIDC sin exponer secrets ni romper produccion. Guia 2026 con ejemplos reales
#cicd #githubactions #docker #kubernetes #oidc